CVE-2021-3860

Publication date

2021-12-20 00:00:00

Family

JFROG

State

PUBLISHED

Description

JFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL Injection by a low privileged authenticated user due to incomplete validation when performing an SQL query.